Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
File:                     ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft (raw, json)
Hash identifier:          8LBCdU4/hhLLue0qj5W3nMNXpovyoiw+FpZoN67Rilk=
Subject key identifier:   BA:E2:81:02:08:75:A6:DA:EB:47:9D:6A:48:30:F8:EE:05:DC:CC:00
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       01962F063E377E8543D57EC32C359822CE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 5l7niHnSzFawKg-6eXVddr5nW40.roa (hash: fnthIPYyIns5UnUMVS3MzUFUL59q+jV5tt0gne5luRs=)
                          2: CNh_5j_R_gJpT50KvKASnm2ddQQ.roa (hash: sz6v/CsZnD6nQK+LURUo6p2F2VafhVQMBGjcdFGL5T4=)
                          3: ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl (hash: Fwjk52UEo7ehudZRja/tTVnN8cUgRJb8q5lD8YmUfXk=)
                          4: UmWol24Z1jCTfjEp_MvTPtb1tBk.roa (hash: COPfsyux35Sm2Dilg0uBivAQ4UwahKUGIAKYrH4YhiQ=)
                          5: ho7hCbw9Z3TdltQdvoKRemY2BZQ.roa (hash: 1oNnxxsmF38W2k7eLcfUs5CR/Cu2kC+IeFK+jVllmvU=)
                          6: kYtgnJnEt9bvUzwgi6iwlE4BUrM.roa (hash: pzKsFa+87OlMRbV5hLa6zqcUD6c0LVukdW7piQ2lbUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:37:7e:85:43:d5:7e:c3:2c:35:98:22:ce:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=bae281020875a6daeb479d6a4830f8ee05dccc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:69:3d:cb:14:b6:3e:96:15:8d:c4:bd:96:
                    7b:5e:75:6a:7c:34:3f:a1:01:b8:9e:d8:79:c8:b8:
                    fa:8d:8b:6c:61:47:94:d1:01:c5:e1:18:c0:e6:90:
                    e5:b3:ed:1b:ed:2b:e7:94:28:1c:ee:21:70:f7:95:
                    65:6b:0a:1a:21:85:5f:a1:7d:13:83:8b:78:09:f1:
                    ed:a1:2d:94:17:be:21:d5:fd:59:83:94:40:f0:44:
                    cd:79:3d:cd:80:fa:46:58:3f:8c:aa:67:d0:77:fd:
                    21:f5:cd:f4:c2:71:5d:17:c2:38:8f:49:fd:14:8a:
                    42:44:7e:b2:b2:f1:c6:6c:48:df:13:fd:99:5d:fe:
                    c9:b4:76:b1:59:cf:87:c3:d3:4a:88:05:4d:44:9a:
                    49:36:26:f4:36:1b:53:d3:d3:54:f1:a6:18:56:6f:
                    1d:aa:25:21:32:51:57:9e:cb:ef:34:d3:57:c9:7c:
                    e2:61:08:43:a8:f8:71:3b:51:1f:87:c2:ad:57:2c:
                    1f:2c:fa:69:8d:0c:8c:18:9e:5d:76:e4:d0:e5:d2:
                    8d:ab:e6:e4:bc:ce:8d:0a:60:24:ee:5c:a4:53:ea:
                    e4:71:26:77:70:e2:85:30:80:32:38:10:2f:17:c7:
                    4f:52:63:5d:df:31:e3:a2:58:3a:ac:2b:9a:41:bf:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E2:81:02:08:75:A6:DA:EB:47:9D:6A:48:30:F8:EE:05:DC:CC:00
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:f3:28:1c:9f:16:95:70:cb:9d:ca:bd:54:84:9b:b0:0d:
         66:bc:30:07:1d:fe:db:0e:90:8c:84:f2:ae:de:6a:f6:e0:3e:
         fb:f7:2d:24:4a:b5:72:eb:c9:72:8b:22:0a:ff:82:3a:47:98:
         fd:54:f2:c0:26:b1:00:ee:a8:b0:c9:97:1c:0f:eb:3e:5c:e2:
         bc:dd:0d:08:07:db:2e:b7:78:78:93:49:5d:f2:1b:73:3e:37:
         f4:1a:9c:1f:75:44:46:41:33:24:45:7d:62:4d:64:57:13:ff:
         b4:5f:bb:c6:a3:b4:69:dc:ce:ab:fd:35:80:f3:80:78:7a:62:
         3e:f3:81:06:a5:08:c5:0a:2e:b2:94:ab:f2:49:77:cd:88:73:
         9a:57:c2:9a:53:12:16:9f:0f:6e:e1:4c:4e:e6:c5:ec:b7:a1:
         8c:3e:ed:1a:58:f5:5f:25:6f:28:07:5e:92:dd:c0:fa:0d:46:
         97:c4:2f:06:2a:ab:f1:3a:5d:08:12:b6:ae:22:f9:1d:88:21:
         32:56:f9:14:39:80:a0:09:5c:ae:7b:01:1e:e1:53:74:04:67:
         6d:4c:f2:c0:ea:62:14:0d:5d:34:3c:55:8d:fd:9c:d1:ca:c0:
         e5:98:7d:92:ec:f0:1c:86:fb:a6:d8:ec:35:ab:94:07:cb:1d:
         5d:d4:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----